The check_token endpoint checks approvals

The check_token endpoint rejects access tokens with updated/denied approvals or for users that
have changed their passwords.

[#42875031]
If no scopes are granted in a token, the uaa will return an error.
add scim authorities to admin, refix default vmc client

[fixes #43611117]
remove obsolete gem code

[fixes #43896637]
[cfid-598] Made Yaml servlet initializer more generic (no UAA refs)

The servlet initializer had some hardcoded references UAA_* environment
variable names.  This change removes those and makes them configurable
via the servlet context.

[#44222845] [cfid-598] remove small uaa.yml from war file
[cfid-598] Add NestedMapPropertySource and use it to create Environment
[cfid-598] Heavy refactoring of Yaml reading